Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 3ftqKn5YavmTHKR/UDOOgUKIBjzsSEb+V4JcQlreUgg=
Subject key identifier: 27:A6:07:75:BD:EA:8D:D7:FE:9D:50:4A:4E:83:69:88:AF:2C:B5:80
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019E1C0FC877397102C0B3CD5FD648A8CA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 12:00:56 +0000
Manifest this update: Tue 12 May 2026 12:00:56 +0000
Manifest next update: Wed 13 May 2026 12:00:56 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: x2k+pnuR9GxpMJIP4VPYMa2t9kctYcJzTDLd1C8RKQE=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c8:77:39:71:02:c0:b3:cd:5f:d6:48:a8:ca:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: May 12 12:00:56 2026 GMT
Not After : May 13 12:00:56 2026 GMT
Subject: CN=27a60775bdea8dd7fe9d504a4e836988af2cb580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:33:89:2a:38:bb:53:ea:e6:04:8a:7b:77:
50:34:46:49:2b:00:10:ac:2d:50:17:fc:94:a3:7e:
f9:e7:85:5e:cf:11:bc:db:45:b6:3c:06:28:75:75:
37:af:aa:0a:5d:6f:c6:5c:7a:0f:ce:a6:c3:e2:dd:
8c:f2:1d:bd:0b:61:b0:8a:fb:57:f6:2f:8d:32:14:
70:79:9a:d1:92:34:38:c2:36:15:75:58:84:e9:f7:
f8:61:ff:89:0a:4c:72:3c:b5:74:fc:73:8f:c3:5b:
e4:35:cd:f5:58:04:19:e1:1b:05:dc:75:bf:e0:60:
4d:1a:f6:e0:80:a5:cf:56:7f:78:e0:5f:a4:24:d3:
1e:6d:94:b3:20:42:5f:67:c9:b5:ce:3d:ac:46:83:
61:07:94:76:36:d0:7c:24:52:fc:88:30:e4:87:93:
b0:30:ad:0a:0a:71:6b:a3:a9:b2:bc:aa:6c:76:4d:
5d:79:3e:f0:7e:e5:68:97:9d:c6:72:bd:98:41:b4:
31:53:52:a1:95:09:66:45:63:54:0f:3e:59:80:22:
4e:71:7c:e8:1c:11:59:55:44:7a:88:31:2a:45:c3:
78:8c:b1:11:c6:12:67:ee:ba:82:45:78:ba:c4:3e:
7f:67:ba:f0:55:2b:18:16:b2:01:47:77:81:17:31:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A6:07:75:BD:EA:8D:D7:FE:9D:50:4A:4E:83:69:88:AF:2C:B5:80
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:82:11:17:fe:d0:88:d4:e5:39:5e:c8:ab:df:62:c9:20:e6:
f0:27:85:01:05:d9:41:f2:c4:b8:03:cd:81:e4:a3:90:3d:87:
16:b0:3e:d3:0d:c3:a7:0d:d0:5b:24:50:8f:c9:d7:94:80:c8:
58:74:f6:61:75:3f:5e:55:de:37:8d:9b:ce:33:d0:53:2b:68:
b7:3f:90:3a:7f:91:87:7b:7b:f0:2c:e9:8f:57:e7:ef:f3:ae:
59:a3:19:b4:6f:bf:ed:bb:0f:54:b8:ac:ec:77:51:fa:6b:89:
65:39:a0:fc:fb:38:af:0f:25:7f:5f:f4:a2:ce:0d:2b:80:7c:
9c:a6:7f:aa:4b:04:71:81:85:95:cb:3e:33:82:a7:9a:55:95:
04:22:32:bd:08:e9:3a:f5:a1:67:a4:21:a1:0a:89:cf:43:2b:
7e:1a:e0:d8:ac:aa:be:79:59:f3:47:ef:97:c6:e6:6e:a1:0e:
54:f7:92:00:1e:d9:0a:7d:f5:ab:25:d5:67:5d:46:27:31:a2:
89:dc:03:47:9f:7d:43:cf:a1:2b:23:2a:13:82:01:3e:d0:81:
44:d3:1b:95:ce:30:28:b9:c3:bb:f7:8a:cf:22:cd:eb:49:e4:
89:d6:65:d9:3a:79:5f:d2:bf:15:2b:32:e7:ae:87:e3:c0:d7:
98:93:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:32 2026 by rpki-client